Hi,

i have a Verify Directory 10.0.1 (the old SDS) server which can be interrogated without authentication.

A simple ldapsearch without a username/password retrieve the data.

I usually login as cn=root to perform write operation but i'd like the read operation to be authenticated too and block unauthenticated ldapsearch.

Do you know how to do it? Using the "IBM Security Directory Server Web Administration Tool" i can't find any option about it.

Thank you,

S.

I think this is what you are looking for :

The anonymous access can also be changed in your ibmslapd.conf altering the ibm-slapdAllowAnon: TRUE  in the dn: cn=Connection Management, cn=Front End, cn=Configuration section

HTH

Hi,

i have a Verify Directory 10.0.1 (the old SDS) server which can be interrogated without authentication.

A simple ldapsearch without a username/password retrieve the data.

I usually login as cn=root to perform write operation but i'd like the read operation to be authenticated too and block unauthenticated ldapsearch.

Do you know how to do it? Using the "IBM Security Directory Server Web Administration Tool" i can't find any option about it.

Thank you,

S.